LSEG is seeking a Senior Security Specialist to join our Cyber Security – Security Testing team as a penetration testing subject matter expert (SME). This engagement-focused, technical role plans, scopes and drives penetration tests across a wide range of systems and applications, providing technical oversight, assurance and consulting expertise throughout the engagement lifecycle assuring quality and delivering measurable risk reduction across applications, infrastructure, cloud and networks, while working closely with internal teams and third-party testing vendors.
Key Responsibilities
Security Testing Engagement Oversight
- Oversee penetration testing engagements throughout the lifecycle, ensuring comprehensive coverage and quality.
- Ensure engagements are appropriately scoped; interview application teams and review architecture to agree scope with all stakeholders.
- Define per-engagement prerequisites, assumptions, constraints and dependencies.
- Identify prerequisites and blockers to punctual delivery and drive their resolution.
- Provide technical oversight during the execution phase.
- Interface with and manage third-party vendors who deliver security testing engagements.
Technical Governance & Quality Assurance
- Act as the technical authority and SME for penetration testing engagements.
- Review testing methodologies, coverage and attack paths to ensure effectiveness.
- Review penetration testing reports produced by team members and third parties -eliminate false positives and ensure accurate, appropriately rated findings.
- Peer review retest evidence and validate remediation outcomes.
Vulnerability Reporting & Remediation
- Conduct overview/debrief sessions before and after engagements to ensure clarity and understanding.
- Ensure reporting of security testing activities is tailored to the intended audience.
- Engage with technical and business stakeholders to convey testing outcomes clearly.
- Support technical teams to understand finding